All Apps and Add-ons

SNMP event

punithjigali
Explorer

How to configure Univesal fowarder to send snmp traps in unix server and how to collect?
whats the use of snmp modular input and where to install it? on the fowarder side or splunk instance?
can we use syslog for snmp traps??

0 Karma

PavelP
Motivator

Hello @punithjigali ,

to send snmp traps from a linux host:

  • install and configure snmp to send traps independently from splunk
  • configure script input to run snmptrap command periodically

how to collect SNMP described here: https://docs.splunk.com/Documentation/Splunk/8.0.3/Data/SendSNMPeventstoSplunk

whats the use of snmp modular input and where to install it? on the fowarder side or splunk instance? - it depends on where you want to capture SNMP input - on Indexer or on HF, on UF too, but you have to configure it manually, because UF has no UI.

can we use syslog for snmp traps - yes, snmp deamon can collect traps and write them to log, and syslog can read this log and send events to Splunk. Alternatevely UF can read the log and send events to Splunk.

There are many options, choose what suits you best.

Let me know if it helps

0 Karma
Get Updates on the Splunk Community!

Fueling your curiosity with new Splunk ILT and eLearning courses

At Splunk Education, we’re driven by curiosity—both ours and yours! That’s why we’re committed to delivering ...

Splunk AI Assistant for SPL 1.1.0 | Now Personalized to Your Environment for Greater ...

Splunk AI Assistant for SPL has transformed how users interact with Splunk, making it easier than ever to ...

Unleash Unified Security and Observability with Splunk Cloud Platform

     Now Available on Microsoft AzureOn Demand Now Step boldly into the AI revolution with enhanced security ...